auditd
There are 1 repository under auditd topic.
bfuzzy / auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
- laurelLanguage:Rust 672
wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Language:Python 621konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
Language:Jinja 511elastic / go-libaudit
go-libaudit is a library for communicating with the Linux Audit Framework.
Language:Go 139bfuzzy1 / auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
- Language:C 41
ITNerdbox / OS-Hardening
Hardening the Linux operating system for Debian like distributions.
Language:Shell 34- Language:HTML 33
Mosuan / AuditdPy
!!!不建议使用了，可以使用AuditBeat!!! Linux服务器命令监控辅助脚本，ElasticSearch + Logstash + Kibana + Redis + Auditd
Language:Python 28xeraa / auditbeat-in-action
Demo for Elastic's Auditbeat and SIEM
Language:HCL 24ShellCode33 / ArchLinux-Hardened
ArchLinux setup which focuses on desktop security
Language:Python 20codewhitesec / apollon
Proof-of-Concept to evade auditd by writing /proc/PID/mem
Language:C 18Proof-of-Concept to evade auditd by tampering via ptrace
Language:C 15j91321 / ansible-role-auditbeat
Ansible role to install auditbeat for security monitoring. (Ruleset included)
Language:Jinja 15robertdebock / ansible-role-auditd
Install and configure auditd on your system.
Language:Jinja 14alex-leonhardt / auditr
A small Go program to read /var/log/audit/audit.log
Language:Go 11dcsteve24 / Ansible-Linux-Install-ELK-Stack
Installs 7.X ELK Stack on CentOS, RHEL, Ubuntu, or Debian
- Language:Ruby 3
- Language:Ruby 3
angelbarrera92 / ansible-role-auditbeat
An Ansible Role that installs Auditbeat on RedHat/CentOS or Debian/Ubuntu.
Language:Python 2appvia / auditd-container
Simple alpine image with auditd intended usage is to be used in combination with docker-desktop kubernetes to allow building a seccomp profiles with the kubernetes-sigs/security-profiles-operator
Language:Dockerfile 2- Language:Go 2
- Language:Perl 2
tricktux / file-audit-system
:eyes: File monitoring software that will log file access to configured directories on the system.
Language:CMake 2- Language:C 1
buluma / ansible-role-auditd
Install and configure auditd on your system.
Language:Jinja 1- Language:Python 1
- Language:Go 1
litew / linux-audit-notes
Notes about linux-audit subsystem (kernel & userspace)
Language:HTML 1mismailzz / CMAuditd_v2
CMAuditd (version 2) is a free and open-source GUI designed to be used with Auditd, which is the userspace component of the Linux Auditing System. It provides more functionality and a better interface than its previous version.
Language:Python 1while-true-do / ansible-role-sys_audit
An Ansible Role to install and configure audit.
Language:Python 1PLZENTERTEXT / autopsy-sigmaa-ingest-module
An Autopsy data source ingest module for detection of IOCs in EVTX for Windows and Auditd for Linux based on SIGMA Rules.
Language:Python 0robertripoll / auth-notification-alert
Python script to notify about successful SSH logins
Language:Python
